pin only the root certs. enable tests

not sure why tests were turned off for clever-python